CRI POPIA Privacy Notice
Effective Date: 12 October 2026
Last Updated: 12 October 2026
Change Leadership Partner (Pty) Ltd, trading as Change Readiness Index™ ("CRI™", "we", "us" or "our"), is committed to processing personal information responsibly and in accordance with the Protection of Personal Information Act 4 of 2013 ("POPIA") and other applicable South African law.
This notice explains how we process personal information, the purposes for which it is processed and the rights available to individuals whose personal information we process.
1. Responsible Party
The legal entity responsible for relevant personal information processing activities is:
Legal Name: Change Leadership Partner (Pty) Ltd
Enterprise Name: CHANGE LEADERSHIP PARTNERS
Registration Number: 2026/798574/07
Jurisdiction: Republic of South Africa
Business Address: Atrium on 5th, 5th Street, Sandhurst, Sandton, 2196
Email: hello@changereadinessindex.com
Telephone: +27 83 321 2456
Website: www.changereadinessindex.com
The responsible party designation applies to processing activities for which the company determines the purposes and means of processing, subject to the actual operating arrangements.
2. Categories of Personal Information
Depending on your interaction with CRI™, we may process:
• Name and surname.
• Email address and telephone number.
• Organisation name.
• Job title or professional role.
• Contact information and correspondence.
• Website form submissions.
• Change Readiness Snapshot™ responses.
• Assessment results associated with identifiable individuals.
• Technical information such as IP addresses, browser and device details.
• Website usage information and cookie-related data.
• Other information voluntarily provided to us.
We seek to collect information that is adequate, relevant and not excessive in relation to the purpose for which it is processed.
3. Purposes of Processing
Personal information may be processed for the following purposes:
• Providing and operating the CRI website.
• Administering the Change Readiness Snapshot™.
• Calculating and delivering assessment results.
• Responding to enquiries.
• Providing requested services or information.
• Communicating with users.
• Improving the assessment and website experience.
• Website analytics and performance monitoring.
• Security and fraud prevention.
• Business administration and recordkeeping.
• Direct marketing where legally permitted.
• Compliance with legal and regulatory obligations.
4. Lawful Processing
We will process personal information in accordance with the conditions for lawful processing under POPIA.
Depending on the circumstances, the applicable justification may include consent, contractual necessity, compliance with a legal obligation, protection of a legitimate interest, or another lawful justification recognised under POPIA.
We will take reasonable steps to ensure that personal information is processed lawfully and reasonably, for a specific and legitimate purpose, and in a manner that does not infringe the privacy of the relevant data subject unjustifiably.
5. Voluntary Provision of Information
Where we request personal information, we will seek to make the purpose of collection reasonably clear.
Some information may be necessary to provide a requested service, process an assessment or respond to an enquiry.
If you choose not to provide information that is reasonably necessary, we may be unable to provide the relevant service or complete the requested interaction.
6. Change Readiness Snapshot™ Assessment
The Change Readiness Snapshot™ uses responses to assessment questions to generate an indicative view of organisational readiness for change and transformation.
Users should avoid submitting personal information about identifiable employees, colleagues, clients or other third parties unless it is necessary, appropriate and lawfully provided.
Assessment results are intended to support organisational reflection and decision-making. They are not intended to constitute a definitive organisational diagnosis or a legal, financial, employment or psychological determination.
7. Data Subject Rights
Subject to POPIA and other applicable law, data subjects may have rights to:
• Be notified that their personal information is being collected or accessed.
• Request access to personal information held about them.
• Request correction, updating or deletion of inaccurate, irrelevant, excessive, outdated, incomplete, misleading or unlawfully obtained information, as applicable.
• Object to certain processing activities.
• Object to processing for direct marketing where applicable.
• Withdraw consent where processing is based on consent.
• Exercise applicable rights concerning decisions based solely on automated processing.
• Lodge a complaint with the Information Regulator.
• Seek appropriate remedies where their rights have been infringed.
Requests may be directed to:
Privacy Contact: Change Leadership Partner (Pty) Ltd
Email: hello@changereadinessindex.com
Telephone: +27 83 321 2456
Address: Atrium on 5th, 5th Street, Sandhurst, Sandton, 2196
We may request reasonable information to verify your identity and may need to apply lawful limitations or exceptions when responding.
8. Direct Marketing
We will process personal information for direct marketing by electronic communication only as permitted under applicable law, including relevant requirements under POPIA.
Where prior consent is required, we will obtain it before sending the relevant communications. Applicable exceptions, including those relating to existing customers, will be applied only where their legal requirements are satisfied.
You may opt out of marketing communications at any time by following the unsubscribe instructions provided or contacting hello@changereadinessindex.com.
9. Security Safeguards
We take reasonable technical and organisational measures designed to protect personal information against loss, damage, unauthorised destruction, unlawful access or unlawful processing.
Where a security compromise triggers notification obligations under POPIA, we will take the steps required by law, including notifying the Information Regulator and affected data subjects where applicable.
10. Operators and Third Parties
We may engage third-party service providers to support website hosting, assessment delivery, analytics, email communications and other business functions.
Where an operator processes personal information on our behalf, we will take appropriate steps to ensure that a written agreement and reasonable safeguards address the operator's confidentiality and security obligations, as required by POPIA.
11. Cross-Border Transfers
Personal information may be stored or processed outside South Africa by certain technology providers.
Where personal information is transferred to a third party in a foreign country, we will take appropriate steps to ensure compliance with section 72 of POPIA and any other applicable legal requirements.
12. Retention and Disposal
We will not retain records of personal information for longer than is necessary to achieve the purpose for which the information was collected or subsequently processed, unless retention is required or permitted by law.
When personal information is no longer authorised to be retained, it will be deleted, destroyed or de-identified in accordance with applicable legal requirements and appropriate procedures.
13. Information Officer
For privacy enquiries and requests, please contact:
Change Leadership Partner (Pty) Ltd
Email: hello@changereadinessindex.com
Telephone: +27 83 321 2456
Address: Atrium on 5th, 5th Street, Sandhurst, Sandton, 2196
The company should ensure that its appointed Information Officer and, where applicable, Deputy Information Officer are appropriately designated and registered as required by POPIA.
This notice does not represent that an Information Officer registration has been completed or independently verified.
14. Complaints to the Information Regulator
If you have concerns about how your personal information is processed, you may contact us so that we can investigate the matter.
You may also lodge a complaint with the Information Regulator of South Africa through its official channels.
Information Regulator of South Africa
Website: https://inforegulator.org.za/
The Regulator's eServices platform is available at:
https://eservices.inforegulator.org.za/
15. Updates to This Notice
We may update this notice to reflect changes in our processing activities, services, technology or legal requirements.
The current version will be published on the CRI website.
Change Leadership Partner (Pty) Ltd
Trading as Change Readiness Index™
Effective Date: 12 October 2026
Last Updated: 12 October 2026